How severe is CVE-2008-4830?

CVE-2008-4830 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2008-4830 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 28% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2008-4830?

CVE-2008-4830 primarily affects Sap Sap Gui. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2008-4830?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2008-4830 published?

CVE-2008-4830 was published on 2009-04-16 and last updated on 2026-06-16.

CVE-2008-4830

CVE-2008-4830 is a critical-severity vulnerability in Sap Sap Gui with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 28% places it in the 98th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Critical (CVSS 2.0 base score 9.3)
EPSS exploit prediction: 28% (98th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Sap Sap Gui
Published: 2009-04-16
Last modified: 2026-06-16

Description

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files via the OpenDocument method.

Frequently asked questions

What is CVE-2008-4830?: Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files via the OpenDocument method.
How severe is CVE-2008-4830?: CVE-2008-4830 has a CVSS 2.0 base score of 9.3, rated critical severity.
Is CVE-2008-4830 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 28% (98th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2008-4830?: CVE-2008-4830 primarily affects Sap Sap Gui. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2008-4830?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2008-4830 published?: CVE-2008-4830 was published on 2009-04-16 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:sap:sap_gui:6.40:*:*:*:*:*:*:*
cpe:2.3:a:sap:sap_gui:7.10:*:*:*:*:*:*:*

More vulnerabilities in Sap Sap Gui

CVE-2008-4827 — Critical (CVSS 9.3): Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx…

All CVEs affecting Sap Sap Gui →